Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/SU-R2dKl3RtgOONpybEZEVBPErs.roa
File: SU-R2dKl3RtgOONpybEZEVBPErs.roa (raw, json)
Hash identifier: wmOlGUDRfVRoRJwpECKk5E/L047ZLq4JcRGfwxt/l58=
Subject key identifier: 49:4F:91:D9:D2:A5:DD:1B:60:38:E3:69:C9:B1:19:11:50:4F:12:BB
Certificate issuer: /CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Certificate serial: 019F2369431E7C05F202074D72AE771A3F47
Authority key identifier: 29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/SU-R2dKl3RtgOONpybEZEVBPErs.roa
Signing time: Thu 02 Jul 2026 15:18:48 +0000
ROA not before: Thu 02 Jul 2026 15:18:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 31.131.12.0/22 maxlen: 22
31.133.24.0/22 maxlen: 22
31.133.192.0/24 maxlen: 24
31.133.193.0/24 maxlen: 24
31.133.194.0/24 maxlen: 24
31.133.195.0/24 maxlen: 24
31.133.196.0/23 maxlen: 23
31.133.198.0/24 maxlen: 24
31.133.199.0/24 maxlen: 24
31.135.1.0/24 maxlen: 24
31.135.7.0/24 maxlen: 24
37.97.122.0/23 maxlen: 23
64.43.66.0/23 maxlen: 23
64.43.68.0/22 maxlen: 22
64.43.80.0/21 maxlen: 21
77.36.4.0/22 maxlen: 22
77.36.8.0/21 maxlen: 21
77.36.28.0/23 maxlen: 23
77.36.30.0/24 maxlen: 24
77.36.32.0/22 maxlen: 22
77.36.36.0/23 maxlen: 23
77.36.38.0/23 maxlen: 23
77.36.40.0/21 maxlen: 21
77.36.48.0/22 maxlen: 22
77.36.52.0/23 maxlen: 23
77.36.57.0/24 maxlen: 24
77.36.60.0/24 maxlen: 24
77.36.65.0/24 maxlen: 24
77.36.68.0/22 maxlen: 22
77.36.80.0/21 maxlen: 21
77.36.89.0/24 maxlen: 24
77.36.90.0/23 maxlen: 23
77.36.92.0/22 maxlen: 22
77.36.96.0/20 maxlen: 20
77.232.192.0/23 maxlen: 24
77.232.194.0/23 maxlen: 23
77.232.196.0/22 maxlen: 22
77.232.200.0/22 maxlen: 22
77.232.204.0/22 maxlen: 22
77.232.208.0/21 maxlen: 21
77.232.220.0/22 maxlen: 22
81.161.12.0/22 maxlen: 22
85.204.196.0/23 maxlen: 24
86.104.132.0/23 maxlen: 24
89.34.74.0/23 maxlen: 24
89.42.232.0/23 maxlen: 24
89.44.100.0/23 maxlen: 24
89.45.92.0/23 maxlen: 24
89.46.112.0/23 maxlen: 24
91.218.252.0/23 maxlen: 23
91.218.254.0/23 maxlen: 23
91.223.158.0/24 maxlen: 24
91.225.34.0/24 maxlen: 24
91.225.35.0/24 maxlen: 24
91.228.119.0/24 maxlen: 24
91.229.6.0/24 maxlen: 24
91.229.16.0/23 maxlen: 23
91.229.31.0/24 maxlen: 24
91.229.156.0/23 maxlen: 23
91.229.158.0/24 maxlen: 24
91.229.159.0/24 maxlen: 24
91.231.223.0/24 maxlen: 24
91.231.224.0/23 maxlen: 23
91.231.226.0/24 maxlen: 24
91.232.16.0/23 maxlen: 23
91.232.254.0/24 maxlen: 24
91.233.2.0/23 maxlen: 23
91.233.202.0/23 maxlen: 23
91.234.150.0/23 maxlen: 23
91.234.220.0/23 maxlen: 23
91.234.222.0/23 maxlen: 23
91.236.77.0/24 maxlen: 24
91.236.237.0/24 maxlen: 24
91.237.48.0/24 maxlen: 24
91.239.0.0/22 maxlen: 22
91.239.178.0/24 maxlen: 24
91.239.222.0/23 maxlen: 23
91.240.156.0/22 maxlen: 22
91.245.176.0/21 maxlen: 21
91.246.184.0/22 maxlen: 22
91.246.188.0/22 maxlen: 22
91.246.196.0/22 maxlen: 22
93.120.8.0/24 maxlen: 24
93.120.9.0/24 maxlen: 24
93.120.12.0/22 maxlen: 22
93.120.27.0/24 maxlen: 24
93.120.28.0/23 maxlen: 23
93.120.30.0/24 maxlen: 24
93.120.46.0/24 maxlen: 24
93.120.48.0/20 maxlen: 20
93.120.64.0/21 maxlen: 21
93.120.74.0/24 maxlen: 24
93.120.75.0/24 maxlen: 24
93.120.76.0/22 maxlen: 22
93.120.80.0/22 maxlen: 22
93.120.85.0/24 maxlen: 24
93.120.86.0/23 maxlen: 23
93.120.88.0/23 maxlen: 23
93.120.90.0/24 maxlen: 24
93.120.92.0/23 maxlen: 23
93.120.94.0/23 maxlen: 23
93.120.120.0/22 maxlen: 22
109.207.140.0/23 maxlen: 23
171.25.223.0/24 maxlen: 24
176.96.48.0/22 maxlen: 22
176.96.56.0/21 maxlen: 21
176.96.93.0/24 maxlen: 24
176.96.176.0/22 maxlen: 22
176.96.180.0/22 maxlen: 22
176.97.144.0/22 maxlen: 22
176.97.148.0/22 maxlen: 22
176.98.56.0/22 maxlen: 22
176.98.60.0/22 maxlen: 22
176.107.64.0/20 maxlen: 24
176.107.72.0/21 maxlen: 21
176.110.106.0/24 maxlen: 24
176.110.114.0/23 maxlen: 23
176.111.0.0/22 maxlen: 22
176.111.4.0/22 maxlen: 22
176.112.84.0/22 maxlen: 22
176.115.236.0/24 maxlen: 24
176.116.40.0/21 maxlen: 21
176.118.88.0/22 maxlen: 22
176.118.92.0/22 maxlen: 22
176.121.96.0/21 maxlen: 21
176.124.176.0/22 maxlen: 22
176.124.180.0/22 maxlen: 22
178.159.147.0/24 maxlen: 24
178.159.148.0/22 maxlen: 22
178.159.152.0/21 maxlen: 21
185.9.236.0/22 maxlen: 22
185.9.240.0/22 maxlen: 22
185.104.196.0/22 maxlen: 24
188.191.248.0/22 maxlen: 22
188.191.252.0/22 maxlen: 22
188.213.233.0/24 maxlen: 24
193.0.190.0/24 maxlen: 24
193.36.192.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Jul 2026 06:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:43:1e:7c:05:f2:02:07:4d:72:ae:77:1a:3f:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Validity
Not Before: Jul 2 15:18:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=494f91d9d2a5dd1b6038e369c9b11911504f12bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8a:e6:ef:97:29:e5:53:f4:c8:83:49:ab:ca:
d2:14:b4:1a:cf:71:1d:57:ad:f9:df:81:48:bd:94:
bf:8f:5d:06:08:74:9f:ca:a6:15:77:99:d0:19:c9:
1b:8c:9b:fd:cf:10:51:74:0d:89:70:d6:74:3c:fc:
9e:91:b9:0e:de:40:b3:6b:54:66:b1:16:82:14:44:
48:97:4c:5c:78:ed:9e:1f:33:f1:05:3a:e1:33:88:
7f:91:d7:44:51:17:54:bb:4e:b6:57:35:74:23:11:
04:f6:8c:77:eb:40:88:4e:12:45:ea:df:ae:19:fa:
9b:ae:16:63:e7:43:15:95:5c:7e:22:2d:60:93:bc:
59:d7:80:3d:93:ad:2a:11:59:c9:16:1b:ba:8a:e1:
4b:4a:88:98:a6:db:59:44:5a:83:7f:ad:2f:f5:04:
d2:b8:9e:91:58:fd:5d:1c:78:38:49:01:bc:52:11:
c0:be:27:02:a1:5f:b3:1d:7f:d6:ee:56:78:96:1f:
fa:15:b6:16:20:a7:cb:9e:ac:78:a5:fe:62:e7:9a:
78:0b:36:bd:d2:67:95:05:27:c6:d0:55:bb:e8:01:
a8:79:6d:5e:e2:4e:03:b4:2d:b4:7e:1f:c2:83:bd:
99:de:75:04:64:c5:26:c0:49:f5:6a:07:da:37:61:
8a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:4F:91:D9:D2:A5:DD:1B:60:38:E3:69:C9:B1:19:11:50:4F:12:BB
X509v3 Authority Key Identifier:
keyid:29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/SU-R2dKl3RtgOONpybEZEVBPErs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.131.12.0/22
31.133.24.0/22
31.133.192.0/21
31.135.1.0/24
31.135.7.0/24
37.97.122.0/23
64.43.66.0-64.43.71.255
64.43.80.0/21
77.36.4.0-77.36.15.255
77.36.28.0-77.36.30.255
77.36.32.0-77.36.53.255
77.36.57.0/24
77.36.60.0/24
77.36.65.0/24
77.36.68.0/22
77.36.80.0/21
77.36.89.0-77.36.111.255
77.232.192.0-77.232.215.255
77.232.220.0/22
81.161.12.0/22
85.204.196.0/23
86.104.132.0/23
89.34.74.0/23
89.42.232.0/23
89.44.100.0/23
89.45.92.0/23
89.46.112.0/23
91.218.252.0/22
91.223.158.0/24
91.225.34.0/23
91.228.119.0/24
91.229.6.0/24
91.229.16.0/23
91.229.31.0/24
91.229.156.0/22
91.231.223.0-91.231.226.255
91.232.16.0/23
91.232.254.0/24
91.233.2.0/23
91.233.202.0/23
91.234.150.0/23
91.234.220.0/22
91.236.77.0/24
91.236.237.0/24
91.237.48.0/24
91.239.0.0/22
91.239.178.0/24
91.239.222.0/23
91.240.156.0/22
91.245.176.0/21
91.246.184.0/21
91.246.196.0/22
93.120.8.0/23
93.120.12.0/22
93.120.27.0-93.120.30.255
93.120.46.0/24
93.120.48.0-93.120.71.255
93.120.74.0-93.120.83.255
93.120.85.0-93.120.90.255
93.120.92.0/22
93.120.120.0/22
109.207.140.0/23
171.25.223.0/24
176.96.48.0/22
176.96.56.0/21
176.96.93.0/24
176.96.176.0/21
176.97.144.0/21
176.98.56.0/21
176.107.64.0/20
176.110.106.0/24
176.110.114.0/23
176.111.0.0/21
176.112.84.0/22
176.115.236.0/24
176.116.40.0/21
176.118.88.0/21
176.121.96.0/21
176.124.176.0/21
178.159.147.0-178.159.159.255
185.9.236.0-185.9.243.255
185.104.196.0/22
188.191.248.0/21
188.213.233.0/24
193.0.190.0/24
193.36.192.0/21
Signature Algorithm: sha256WithRSAEncryption
a7:fd:9d:52:8b:58:4d:86:30:c8:cf:2a:e2:2a:65:64:ee:c5:
4c:b3:20:9b:07:13:18:f4:33:6d:66:a6:d2:6c:c7:e0:89:1f:
78:8d:c1:9a:f7:67:c4:e1:b6:f1:c3:fc:dc:ce:1a:ec:1f:8b:
3c:8b:d3:e9:13:a4:bb:80:f9:f2:76:9e:a1:35:b1:b1:37:1d:
70:87:24:1a:a4:b9:eb:0f:0b:ae:57:88:dc:78:87:23:48:e1:
f5:22:69:bd:39:93:49:00:af:d5:7e:8d:bc:0d:54:72:3f:e1:
fe:41:0a:8f:3e:c9:27:1f:0b:fd:76:a6:1f:48:fd:f2:f6:ec:
24:f4:7c:54:3e:e9:14:52:a5:e9:34:f1:a6:c4:f5:a3:2b:12:
cd:2d:69:c9:11:be:e4:70:fe:b2:18:c2:a7:5b:a4:62:78:86:
b6:fe:e0:26:72:ca:80:f0:be:28:2c:5d:96:9c:b2:68:6b:2a:
ee:c3:b7:95:a2:ab:08:b5:98:97:2d:31:8f:ef:49:2a:fe:99:
dc:ee:c9:54:ce:63:8c:2a:63:7b:eb:fc:a5:82:ec:6c:6c:2c:
6a:b1:df:1a:8d:d6:b6:22:5f:c4:be:42:4d:9c:bc:60:9b:56:
8c:63:e0:c2:cd:d0:dc:51:77:3f:6c:af:2b:65:0d:29:3d:bd:
3c:f5:0d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 15:22:31 2026 by rpki-client